Red Hat Red Hat Ceph Storage 8

• CVE-2026-18495 Medium 6.1 Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough 0.1%
• CVE-2025-12801 Medium 6.5 Nfs-utils: rpc.mountd in the nfs-utils privilege escalation 0.5%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%
• CVE-2025-9820 Medium 4.0 Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 0.2%
• CVE-2025-14874 High 7.5 Nodemailer: nodemailer: denial of service via crafted email address header 0.6%
• CVE-2025-14104 Medium 6.1 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 0.2%
• CVE-2025-14010 Medium 5.5 Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output 0.2%
• CVE-2025-13601 High 7.7 Glib: integer overflow in in g_escape_uri_string() 0.3%
• CVE-2025-11561 High 8.8 Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 0.8%
• CVE-2025-4598 Medium 4.7 Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump 1.3%
• CVE-2024-11831 Medium 5.4 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 1.1%